
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
File: E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json)
Hash identifier: tf5yytPrAaadquPtv8QXKhIy3L1jJVhkAEnRy9eaEqI=
Subject key identifier: 3B:64:74:65:C0:CD:C9:EA:91:D8:2E:0A:ED:11:3D:AD:FB:6D:A2:29
Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
Certificate issuer: /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57
Certificate serial: 2595
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
Manifest number: 2595
Signing time: Mon 02 Mar 2026 14:50:22 +0000
Manifest this update: Mon 02 Mar 2026 14:50:22 +0000
Manifest next update: Mon 09 Mar 2026 14:50:22 +0000
Files and hashes: 1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: eQnSIfU1sSC/nH1Pb6D2mDUIa62mQd5naxO2k/AtD6I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 14:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9621 (0x2595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57
Validity
Not Before: Mar 2 14:50:22 2026 GMT
Not After : Mar 9 14:50:22 2026 GMT
Subject: CN=69a5a3ae-9d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:00:8b:bf:1f:31:68:37:6e:fe:a4:7d:d2:
02:79:98:8e:44:7d:37:d5:56:75:5f:2d:ad:42:85:
f2:97:6b:4e:fd:39:74:d2:45:c3:fc:8b:4f:dc:1e:
18:42:45:54:53:35:7b:04:95:3b:f7:7e:c5:5f:a8:
2d:d0:00:dd:90:99:f6:5c:0b:ca:cf:e5:db:fc:d5:
4c:97:2e:fe:11:86:51:e0:12:6f:70:cc:50:c0:06:
f9:8e:df:bc:7f:eb:ba:43:8b:72:34:0f:4a:e1:05:
53:33:bf:87:18:b6:b2:be:91:28:40:ff:bd:6d:f1:
ee:fc:93:3d:b5:f6:6d:ce:4d:00:64:da:25:68:8c:
3e:8d:40:74:22:e4:12:07:e6:4c:b0:b9:de:4e:4b:
eb:d6:3f:8d:b9:21:17:95:ae:1e:68:6c:5e:98:88:
4e:fb:f6:45:f1:44:63:3a:81:ac:a4:a5:7d:0e:85:
33:49:4b:c2:25:3f:13:17:17:ed:35:95:4a:b7:a1:
3a:ea:78:da:82:da:90:72:06:6e:42:e7:3c:fa:17:
a8:1a:f9:78:cb:cd:62:d1:ba:81:36:14:c1:a5:c9:
7f:c6:62:b8:b6:3e:74:d2:c6:85:02:33:7b:ac:4a:
8e:70:8b:e9:37:eb:3f:0c:31:2c:d7:b1:bd:9c:6e:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:74:65:C0:CD:C9:EA:91:D8:2E:0A:ED:11:3D:AD:FB:6D:A2:29
X509v3 Authority Key Identifier:
keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ca:78:d6:cc:55:7e:b1:54:6d:0e:75:3d:7f:78:84:cc:41:c3:
18:53:50:af:0f:29:02:fc:b3:0f:22:dc:6f:90:a2:18:ec:9a:
ed:47:24:5b:fa:bb:46:9a:d4:cb:04:55:94:17:8f:68:e5:57:
10:f1:1c:e3:e1:85:99:a2:8b:b4:fc:b7:e1:6d:f0:61:dd:c8:
53:0e:c7:1a:ff:31:da:5a:a3:67:ea:1e:e6:cb:e7:85:c7:84:
d6:f6:5c:8c:79:c6:03:75:d2:e6:bb:73:d2:fb:82:28:59:51:
b2:ce:80:b5:50:ea:f2:de:cd:b9:08:1f:39:00:27:85:55:33:
20:8c:e1:3e:0f:bf:0a:0e:a3:80:8c:89:37:01:81:8c:99:1b:
d4:16:99:32:48:7d:40:c8:8d:73:02:29:5b:a8:28:2b:65:f9:
f9:c4:8d:08:a5:bd:52:6b:60:3e:53:29:c5:1f:75:aa:3c:22:
05:b8:3d:b1:f4:78:eb:8d:14:74:6d:4b:b2:f1:f4:e4:75:aa:
4b:e8:39:5d:3a:d0:74:cd:79:1f:c0:e0:f2:ba:b4:86:dc:f6:
0d:4b:56:cb:71:7a:7d:c5:4e:4b:ba:8e:56:76:98:c5:aa:98:
76:e6:eb:47:3d:4a:cc:91:50:61:5a:1d:e5:79:83:9b:04:31:
5c:57:d2:ef
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzk0ODQxMTAvBgNVBAUTKDEzNUY4MjJGRjQ1NjQwMzkxQUVCNDZDNDM3NTQxMDAy
NjA2OTNBNTcwHhcNMjYwMzAyMTQ1MDIyWhcNMjYwMzA5MTQ1MDIyWjAYMRYwFAYD
VQQDEw02OWE1YTNhZS05ZDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtEwAi78fMWg3bv6kfdICeZiORH031VZ1Xy2tQoXyl2tO/Tl00kXD/ItP3B4Y
QkVUUzV7BJU7937FX6gt0ADdkJn2XAvKz+Xb/NVMly7+EYZR4BJvcMxQwAb5jt+8
f+u6Q4tyNA9K4QVTM7+HGLayvpEoQP+9bfHu/JM9tfZtzk0AZNolaIw+jUB0IuQS
B+ZMsLneTkvr1j+NuSEXla4eaGxemIhO+/ZF8URjOoGspKV9DoUzSUvCJT8TFxft
NZVKt6E66njagtqQcgZuQuc8+heoGvl4y81i0bqBNhTBpcl/xmK4tj500saFAjN7
rEqOcIvpN+s/DDEs17G9nG4TUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDtkdGXA
zcnqkdguCu0RPa37baIpMB8GA1UdIwQYMBaAFBNfgi/0VkA5GutGxDdUEAJgaTpX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTQ4NC8wQTBGODVGQzI5
MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FEa2E2MGJFTjFRUUFtQnBP
bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0UxLUNMX1JXUURrYTYwYkVOMVFRQW1CcE9sYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTQ4NC8wQTBGODVGQzI5MEUxMUU1OTNCRkM2MjZDNEY5QUUwMi9FMS1DTF9SV1FE
a2E2MGJFTjFRUUFtQnBPbGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAynjWzFV+sVRtDnU9f3iEzEHDGFNQrw8pAvyzDyLcb5CiGOya7UckW/q7RprU
ywRVlBePaOVXEPEc4+GFmaKLtPy34W3wYd3IUw7HGv8x2lqjZ+oe5svnhceE1vZc
jHnGA3XS5rtz0vuCKFlRss6AtVDq8t7NuQgfOQAnhVUzIIzhPg+/Cg6jgIyJNwGB
jJkb1BaZMkh9QMiNcwIpW6goK2X5+cSNCKW9UmtgPlMpxR91qjwiBbg9sfR4640U
dG1LsvH05HWqS+g5XTrQdM15H8Dg8rq0htz2DUtWy3F6fcVOS7qOVnaYxaqYdubr
Rz1KzJFQYVod5XmDmwQxXFfS7w==
-----END CERTIFICATE-----
Generated at Wed Mar 4 08:42:48 2026 by rpki-client